Privacy Policy & Data Protection

Company:

Mathis Trading GmbH

Please refer to our Impressum for full company details.

Brand: Biomatra® is a registered brand owned by Mathis Trading GmbH.

1. Introduction

This Privacy Policy explains how Mathis Trading GmbH (“we”, “our”) processes personal data when you visit our website www.biomatra.ch, use our contact form, request information, samples or Safety Data Sheets (SDS), or enter into a business relationship with us. We comply with the Swiss Federal Data Protection Act (revDSG, SR 235.1, effective 1 September 2023) and, where applicable, the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). We process personal data only as necessary for the purposes described below, in a lawful, fair, transparent and proportionate manner.

2. Data Controller

Mathis Trading GmbH
Wiggenhalde 11
6010 Kriens, Switzerland
Email: info@biomatra.ch
No Data Protection Officer (DPO) is required under revDSG or GDPR for the size and nature of our business.
For any privacy-related questions or requests, please contact us at info@biomatra.ch.

3. Categories of Personal Data Processed

We may process the following categories of personal data:
- Contact and identification data: name, company, position, email, phone, address
- Inquiry data: messages sent via the contact form, product and volume requests, SDS or sample requests
- Contract and billing data: orders, deliveries, invoices, payments
- Technical usage data: IP address, browser, device information, access times, website usage logs
- Communication data: emails, phone conversations, online-form exchanges
Even in B2B transactions, contact persons of companies are considered data subjects and their data is protected under revDSG and GDPR.

4. Purposes and Legal Bases

We process personal data for the following purposes:

Responding to inquiries, sample & SDS requests, preparing quotations – Pre-contractual measures (GDPR Art. 6(1)(b); revDSG Art. 31)
-Performing and managing contracts (orders, delivery, invoicing, after-sales) – Contract (GDPR Art. 6(1)(b); revDSG Art. 31)
Compliance with Swiss/EU commercial, tax, chemical-safety & product-liability obligations – Legal obligation (GDPR Art. 6(1)(c))Protection of legitimate interests (fraud prevention, IT & data security, business continuity) – Legitimate interests (GDPR Art. 6(1)(f); revDSG Art. 31)
Optional website analytics, cookies, marketing – Consent (GDPR Art. 6(1)(a); revDSG Art. 6)

We do not sell or rent personal data.

5. Disclosure to Third Parties

We may disclose personal data only as necessary for the purposes stated above to:

fulfilment and logistics partners, including Stiftung Brändi Produktion Kriens, Swiss Post and other delivery providers;
IT and hosting providers, including Wix and secure email providers;
payment service providers and banks;
marketing, analytics and advertising platforms, including Google services, Google Shopping, Meta platforms such as Facebook and Instagram, LinkedIn and other search engines or advertising networks;
competent authorities where required by law.

From 17 July 2026, order picking, packing, dispatch and approved returns may be processed by our fulfilment partner, Stiftung Brändi Produktion Kriens, on behalf of Mathis Trading GmbH. Brändi processes personal data only for the purpose of fulfilling orders and related fulfilment services. The offer states that Brändi acts as an order processor and that personal data is processed for fulfilment purposes only.
All such third parties are contractually bound to comply with Swiss revDSG / GDPR data-protection standards. We do not sell or rent personal data.

6. International Data Transfers

Some service providers (e.g. Wix, analytics tools) may process data in countries outside Switzerland/EU.
Such transfers take place only if:
- the country is recognized by Switzerland/EU as providing an adequate level of protection, or
- we use Standard Contractual Clauses and other safeguards to ensure equivalent protection.

7. Data Retention

We keep personal data only as long as necessary for the purposes stated or as required by law:

Inquiries without contract: up to 12 months
Contracts and related business records: 10 years (Swiss Code of Obligations & tax law)
Technical logs: max. 12 months
Cookies: according to browser and site-settings

When data is no longer required, it is securely deleted or anonymised.

8. Cookies and Analytics

Our website uses essential cookies for core functionality, security and usability.

We may also use analytics and marketing tools, including Wix Analytics, Google services, Google Shopping, Meta platforms such as Facebook and Instagram, LinkedIn and other search engines or advertising networks.

These tools may process technical data such as IP address, device information, browser type, website usage, language preference, clicks, referrals and conversion data.

Where required, non-essential cookies and marketing tools are used only with consent. You can configure your browser to block or delete cookies; this may affect website functionality.

9. Rights of Data Subjects

Under the revDSG and (where applicable) the GDPR, you have the right to:

Obtain information about the personal data we process about you
Request correction or deletion of your data
Request restriction of processing or data portability (GDPR)
Withdraw any consent given (e.g. for marketing cookies)
Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with an EU supervisory authority

To exercise these rights, please contact: info@biomatra.ch

10. Third-Party Website Tools

Our website is operated through the Wix platform and may use third-party tools, apps or integrations for website functionality, multilingual display, content protection, analytics, marketing, checkout, payments and order processing.

Such tools may process limited technical or usage data where necessary to provide their functions.

We may use, among others:

Wix and Wix Multilingual;
Mega Content Protector;
Google services, including Google Shopping;
Meta platforms, including Facebook and Instagram;
LinkedIn;
other search engines, analytics tools or advertising networks.

The processing of data by these providers is subject to their own privacy policies where they act as independent data controllers.

11. Data Security

We use appropriate technical and organisational measures (revDSG Art. 8; GDPR Art. 32) to protect personal data against loss, misuse, unauthorised access, disclosure or alteration.
All employees and third-party processors are bound by confidentiality obligations.

12. Payment Security

All card payments on our website are processed securely via Wix Payments and its licensed partners, which are PCI-DSS Level 1 compliant. During checkout, sensitive payment details such as credit card numbers and security codes (CVV/CVC) are transmitted in encrypted form (SSL/TLS) directly to the payment processor and are not stored on our servers. For enhanced protection, Strong Customer Authentication (3‑D Secure) may be applied by the customer’s bank. Mathis Trading GmbH has no access to and does not store customers’ card numbers or security codes.

13. Special Notes for B2B Customers

Even in B2B relationships, contact details of company representatives (names, emails, phone numbers) constitute personal data. Business customers are responsible for informing their employees that their data is provided to us for order processing.

14. Social Media and External Platforms

Our website may include links to our official pages on social media and external platforms, including Facebook, Instagram, LinkedIn and other online platforms. When you access these platforms, their own privacy policies apply. We do not control their independent data processing. If plugins, pixels, tracking tools or advertising integrations are used, technical data such as IP address, browser information, usage behaviour and interaction data may be transmitted to the respective platform, subject to applicable consent requirements.

You can reduce such tracking by adjusting your cookie preferences, browser settings or platform privacy settings.

15. Limitation of Liability

While we take all reasonable measures to protect personal data, no transmission or storage system can be guaranteed 100% secure.
Mathis Trading GmbH is liable only for breaches caused by our intentional or grossly negligent misconduct and to the extent required by Swiss law.
We are not liable for unauthorised access by third parties due to factors beyond our reasonable control.

16. Changes to this Privacy Policy

We may update this Privacy Policy at any time to reflect legal, technical or business changes.
The latest version published on www.biomatra.ch applies.

17. Version

Current version: 09.07.2026

Thank you visiting our website.